Read the docs

Melapress

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Melapress records in CISA KEV

No Melapress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Activity Log 5 records MEDIUM Wp 2fa 4 records LOW Melapress File Monitor 3 records MEDIUM Melapress Login Security 3 records MEDIUM

Records

3 records in Melapress File Monitor · all components

TI-2024-09166 CVE-2024-9879 · GHSA-8rgg-p4jx-9xw2

Website File Changes < 2.1.1 - Authenticated SQL Injection

Priority MEDIUM 60

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2025-05-15 Fixed in 2.1.1 CWE-89
TI-2024-09289 CVE-2024-10009 · GHSA-5gjw-c85q-72c7

Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection

Priority MEDIUM 52

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00418 Published 2025-05-15 Fixed in 2.1.0 CWE-89
TI-2025-03261 CVE-2025-3702 · GHSA-39j6-jjvv-95wr

WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00266 Published 2025-07-03 No fix listed CWE-862
Open these records in search →